APACHE TOMCAT 9.0 27 EXPLOIT MOVIE

GhostCat is a flaw in the Tomcat AJP (Apache JServ) protocol. Worse, in instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code and trigger this vulnerability to gain remote code execution (RCE) on the server. For example, an attacker can read the webapp configuration files or source code. The vulnerability allows an attacker to read any files in the webapp directories of Tomcat. GhostCat (the vulnerability) affects the Tomcat application/middleware server produced by the Apache Foundation and commonly used across many business and other organizations to execute Java application code.Ībout as bad as it gets. Why is this vulnerability called ‘GhostCat’? Its discoverers have lovingly furnished it with its own logo (complete with notched ear Ghostcat is clearly a brawler), and website.

APACHE TOMCAT 9.0 27 EXPLOIT MOVIE

Their second priority, though, is to throw out the official CVE reference and come up with a really awesome name for it (personal favourite: Dirty Cow)Īside from being a – by all accounts truly terrible – direct-to-TV movie about a recently deceased cat who comes back from the dead to try and stop scammers and wealthy businessmen from making unnecessary land-development deals, “ Ghostcat” is also the fond nickname for vulnerability CVE-2020-1938. When a security vulnerability researcher finds a new web application vulnerability, their first priority is to write a script or snippet of code to act as a simple, reproducible test that can be used to find out if a given web server is vulnerable.

Apache tomcat 9.0 27 exploit